Manifest

$ rpki-client -vvvf rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
File:                     395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft (raw, json)
Hash identifier:          YKL3YBNspNhaeqfboWhchqaXdSIGu60+ybc4XbtVziQ=
Subject key identifier:   3D:4E:CF:3B:F2:92:EB:22:64:EC:A9:13:32:B3:8D:07:C6:56:A3:8B
Authority key identifier: 39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F
Certificate issuer:       /CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
Certificate serial:       286DDD5018F861BF95C426D964904D3E1B45D81D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
Manifest number:          01FE
Signing time:             Tue 13 Oct 2026 21:16:31 +0000
Manifest this update:     Tue 13 Oct 2026 21:11:31 +0000
Manifest next update:     Thu 15 Oct 2026 01:02:31 +0000
Files and hashes:         1: 395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl (hash: 91CX8nLNMFquSIywr2FYkku0NRqsEG0VrBU0tAZfwSw=)
                          2: 3138362e3139352e3137302e302f32332d3233203d3e20323734343836.roa (hash: bO5LOh5tf83j1iA04EYYIrlYZ/gKg1FrwYVSs1cRGmg=)
                          3: 323830343a393465383a3a2f33322d3332203d3e20323734343836.roa (hash: 49duIBMY8bd9G5qde0uXsMuJHM5k0sOUhM+ID0aHzmU=)
                          4: 3138362e3139352e3137312e302f32342d3234203d3e20323734343836.roa (hash: TatRGrc3mJRWWPGpb1l2tYlJ+Lou6oM/PLsOwESHNuQ=)
                          5: 323830343a393465383a333030313a3a2f34382d3438203d3e20323734343836.roa (hash: om8D32jygVOtQxKT0ljtzvahGU1e9ZIhO2fOqPYPYl0=)
                          6: 323830343a393465383a313030303a3a2f34382d3438203d3e20323734343836.roa (hash: NeaG8JjQ+c3FWtG3/nWXjeqNLptNqst1n96HoNeMPjs=)
                          7: 323830343a393465383a323030303a3a2f34382d3438203d3e20323734343836.roa (hash: +FrJFLsCO2s2d8o7Df7K1aZ72bCYkFJHjhNs8qyg5CI=)
                          8: 3138362e3139352e3137302e302f32342d3234203d3e20323734343836.roa (hash: kUwBv4X36apbdYb+QEV2Mt3gwsGNvu5IRpHK4AOjelY=)
                          9: 323830343a393465383a323030313a3a2f34382d3438203d3e20323734343836.roa (hash: 5Uz50IZxRb1/uT4YuOKj4/i8aaf+ELJQ6vLCIs9EXdw=)
                          10: 323830343a393465383a313030313a3a2f34382d3438203d3e20323734343836.roa (hash: rp1aF+JqWMblW8TnZANBke3q9B2/eUp/yb96rZuQfx8=)
                          11: 323830343a393465383a333030303a3a2f34382d3438203d3e20323734343836.roa (hash: Aw9fasgBnuZAepySGxsZx5IIQpagTX+5RvZdfpyFd8M=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl
                          rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 01:02:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6d:dd:50:18:f8:61:bf:95:c4:26:d9:64:90:4d:3e:1b:45:d8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F
        Validity
            Not Before: Oct 13 21:11:31 2026 GMT
            Not After : Oct 15 01:02:31 2026 GMT
        Subject: CN=3D4ECF3BF292EB2264ECA91332B38D07C656A38B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:ec:f7:18:e7:35:83:df:9d:f1:45:11:33:
                    a6:c7:37:b0:c7:68:4c:a6:ba:01:0d:5b:28:2f:c5:
                    b2:b1:b6:42:af:70:07:d2:9c:25:6f:fd:96:1c:75:
                    72:ff:1b:29:bf:37:b7:06:26:57:ca:29:42:0b:5d:
                    4f:5d:6e:eb:df:18:5a:a8:48:5e:a3:92:c0:ed:72:
                    e2:aa:a5:6d:89:ad:82:cc:45:4a:b0:7b:71:e2:92:
                    c3:06:94:b3:3d:6d:68:d8:5c:69:3d:7b:bb:14:f1:
                    4c:18:b8:f5:67:f5:e0:6e:36:b4:b1:db:09:a1:81:
                    35:a9:a8:15:7e:ac:57:0c:a0:21:bf:be:98:ce:28:
                    63:be:60:a6:09:6f:c5:6c:38:71:66:3f:03:85:6d:
                    b9:5a:8e:c2:ba:2e:42:c8:ce:66:d5:74:7b:c9:7b:
                    cf:cc:ce:38:21:16:ef:5b:74:b1:33:d2:ae:f5:9a:
                    c7:e5:9a:71:2c:ce:bf:e3:2d:cf:e3:df:c3:bf:45:
                    63:ea:c1:5c:82:fd:47:84:4b:ce:bf:17:45:7f:3b:
                    30:f1:c2:4e:25:62:a1:03:c1:76:e1:1b:b2:e2:df:
                    7d:25:d2:fb:e2:c4:c7:e7:97:fb:30:a7:93:ff:01:
                    95:3f:0e:75:df:a9:9b:27:58:89:2a:6d:be:06:ca:
                    3c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4E:CF:3B:F2:92:EB:22:64:EC:A9:13:32:B3:8D:07:C6:56:A3:8B
            X509v3 Authority Key Identifier:
                keyid:39:5A:3C:0B:8F:8A:2C:EF:DC:38:3D:57:6F:90:72:BC:CC:70:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKzjq6SyBaQo3bDfPdVXc4LeZu58KLARL88tT1pR7p9u/0/395A3C0B8F8A2CEFDC383D576F9072BCCC70CB9F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:04:da:18:38:92:fb:89:70:b7:ea:e5:f2:9e:20:7c:c2:be:
         20:65:63:ee:93:ad:ac:38:e8:b3:8e:de:ba:05:5f:27:cf:78:
         12:35:c9:5a:4b:ca:24:1a:3f:8e:f3:a6:e0:53:5b:97:fb:7a:
         40:fc:78:c0:cf:f7:ab:95:49:9e:a9:6f:dd:0c:a3:cc:0a:4f:
         1e:c0:5a:42:2c:c2:ec:e6:52:85:be:a5:29:01:cf:3a:f2:38:
         54:8f:01:42:5c:24:54:29:65:63:62:71:db:b5:68:9d:c7:d3:
         cb:09:62:5d:5c:4c:ca:7f:df:35:b2:37:fc:2d:08:29:b9:f1:
         ed:18:2a:5a:b9:01:e1:e8:ff:00:6f:ff:2f:07:b0:29:39:7a:
         28:4a:0c:9d:e3:c9:f4:6d:66:2a:9d:a7:96:a7:6a:6a:7c:b0:
         45:87:bc:f9:6c:39:47:f5:a9:7a:14:10:14:98:cc:0c:51:02:
         4a:94:47:8e:23:e1:73:e5:32:2c:f4:3e:6b:99:7a:40:db:f0:
         35:33:90:86:b8:38:6e:38:94:70:96:e3:1b:24:8f:77:b9:62:
         c4:43:4e:a1:60:31:d8:f0:62:0a:a6:a7:62:f6:1c:a7:04:30:
         f7:9c:47:b6:af:4e:48:a5:63:ab:b2:05:28:c8:9d:14:3a:aa:
         55:56:bc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:56:36 2026 by rpki-client